1921221 - (https-first-release) [meta] HTTPS-First by default in Release

Status: RESOLVED FIXED

(Core :: DOM: Security, task)

Description

[Frederik Braun [:freddy] (OOO - back August 10th)]

This is the meta bug for shipping HTTPS-First to release for all of our users.

There is a long tail of HTTPS-First bugs blocking bug 1704453, which we should ideally fix but not all of them will make it to our scope for making the feature release-ready

Comment 1

[Frederik Braun [:freddy] (OOO - back August 10th)]

Nominating bug 1943551 for consideration. I believe we should figure out the test automation story before we annoy web developers who are testing with Firefox.

Comment 2

[Malte Jürgens [:maltejur]]

Attachment: Bug 1921221 - Enable HTTPS-First in Release r?freddyb!

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/6037e16b9a70
Enable HTTPS-First in Release r=freddyb

Comment 4

[Serban Stanca [:SerbanS]]

https://hg.mozilla.org/mozilla-central/rev/6037e16b9a70

Comment 5

[Donal Meehan [:dmeehan]]

:freddy could you consider nominating this for a release note? (Process info)

This is the note we used when this was enabled in nightly:

Starting with Firefox 129, Firefox Nightly will automatically try to use a secure HTTPS connection whenever possible when loading a page. This behavior is known as "HTTPS-First", or "HTTPS Upgrades", and has been the default in Firefox's private browsing mode since Firefox 91. Here is a blog post from when this feature was introduced in Private Browsing.

Comment 6

[Frederik Braun [:freddy] (OOO - back August 10th)]

Release Note Request (optional, but appreciated)
[Why is this notable]: We will change page loads through links that start with HTTP to try and use HTTPS instead. If HTTPS does not work, we fall back to HTTP gracefully.
[Affects Firefox for Android]: Yes
[Suggested wording]: Firefox will upgrade page loads to HTTPS and gracefully fall back to HTTP if that does not succeed.
[Links (documentation, blog post, etc)]: https://support.mozilla.org/en-US/kb/https-first

Comment 7

[Donal Meehan [:dmeehan]]

Thanks, added to the Fx136 nightly release notes, please allow 30 minutes for the site to update.
Keeping the relnote-firefox flag as ? to keep it on the radar for inclusion in the final Fx136 release notes.

Comment 8

[Frederik Braun [:freddy] (OOO - back August 10th)]

Moved the webcompat:platform-bug from bug 1704453 to here, to properly reflect that the main feature has long since landed.